Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json)
Hash identifier: g+marSzfAMIu8AIjysXT75LVI2JkLgUT5AJzuvrwqKU=
Subject key identifier: 53:1D:D5:A7:20:C9:98:AD:13:90:DB:B5:20:46:0D:C2:24:99:6E:10
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 01A15778D90721B596701BF2C1A65ACBEDC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
Manifest number: 17C2
Signing time: Tue 20 Oct 2026 04:01:39 +0000
Manifest this update: Tue 20 Oct 2026 04:01:39 +0000
Manifest next update: Wed 21 Oct 2026 04:01:39 +0000
Files and hashes: 1: 1-zgZS_oWFjeb_FUaP5rf7CIay9s.roa (hash: oe0GxzRMGYrpk5fK7HR9K3weYFmW/xstDWDPAgUmAy8=)
2: W79nBKhPAzEIedXVT5rNtMV1yOo.roa (hash: mixrNOg93KKzgb3tWB4Qt/opKcOsyCnIL17ZEqCbhik=)
3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: eRYcyDqbt6ikOdwGu5zrk1ssHKxxlNhuGo5KMgQ3qxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 04:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:78:d9:07:21:b5:96:70:1b:f2:c1:a6:5a:cb:ed:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Oct 20 04:01:39 2026 GMT
Not After : Oct 21 04:01:39 2026 GMT
Subject: CN=531dd5a720c998ad1390dbb520460dc224996e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:01:01:a3:dc:d3:eb:18:58:f7:15:e5:83:65:
b0:89:7a:75:1c:f1:56:da:24:4d:ab:a0:c6:82:51:
26:cd:ae:80:1d:9d:0f:fc:6c:c8:21:6d:00:eb:ff:
c4:5a:1f:d5:02:7c:0f:73:26:b0:6a:c4:2c:2e:d2:
47:f1:26:d2:5c:90:11:c4:98:49:fe:36:74:f1:9d:
f7:fc:21:48:ec:8a:cd:93:b9:0f:8e:b7:a7:cb:2b:
84:50:b7:68:aa:71:ac:10:56:ab:07:3c:54:4a:81:
7d:58:52:c1:be:c3:12:da:3e:94:15:21:92:5b:eb:
19:a9:3d:67:08:fe:c9:33:f1:c2:cf:8e:19:4a:99:
fc:b2:d1:33:5d:d1:b1:af:31:bb:79:60:88:9a:a0:
b8:0a:ed:1d:d2:07:fa:36:84:d9:72:50:4a:12:55:
5f:d0:c6:3e:fd:b1:dc:bf:c8:16:95:52:24:6d:ae:
85:8c:ff:80:9c:0e:fd:37:0c:36:c1:a1:27:ec:9a:
cc:8e:2c:ed:30:0e:af:bb:00:ef:27:ce:6b:41:78:
7b:a3:22:f4:51:09:e3:e6:f2:25:63:2f:8e:2c:4c:
cc:07:3c:a1:04:52:6d:4c:c1:87:b0:07:32:31:c7:
63:37:ac:f6:aa:95:0a:36:58:be:f0:45:46:5f:16:
54:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1D:D5:A7:20:C9:98:AD:13:90:DB:B5:20:46:0D:C2:24:99:6E:10
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5b:d9:03:58:f9:be:07:bd:5f:10:92:d3:d0:8f:d9:3f:ae:
21:56:4d:cd:0c:49:52:83:b1:04:65:67:60:17:97:19:bf:63:
95:24:2d:ca:ea:54:fa:e2:94:6a:0c:21:68:cd:bc:ef:27:2d:
d2:7a:95:06:73:6b:4d:a2:73:df:ec:9f:18:1b:0d:30:e9:ce:
27:54:79:d1:53:76:17:a0:17:8f:f5:02:ae:ca:c5:81:9b:c4:
f6:be:fe:5d:71:8f:7e:f8:f7:45:a5:b3:39:a8:db:ff:53:41:
f3:7b:c0:1d:51:65:f1:c1:ac:56:ea:80:7f:df:f7:ac:96:34:
40:d3:fd:c1:30:46:3b:f3:cd:bf:5e:ee:c0:16:2e:74:50:3a:
8f:aa:5d:8e:db:31:0a:0b:c8:22:1b:b2:57:51:3c:ac:4b:40:
88:01:f1:fc:f5:ad:ac:2b:7c:3b:7e:53:65:22:2d:d6:7b:60:
12:25:fa:51:dd:69:c5:31:88:8b:4a:47:2d:0c:45:0b:18:b7:
e7:da:34:f2:6e:45:64:9f:77:b0:c9:2c:25:8c:75:94:94:31:
12:ac:20:95:ac:4d:af:c5:58:d6:8e:db:54:06:50:77:44:a7:
cd:3c:cc:cb:89:e0:34:e2:14:00:65:26:62:6b:ae:11:3d:4b:
3d:16:b1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 12:32:54 2026 by rpki-client